fedcode-next: Documentation on how to use the new curation feature

Signed-off-by: ziad hany <ziadhany2016@gmail.com>

Author: ziadhany

docs/source/advisory-package-curation.rst

@@ -0,0 +1,36 @@
+.. _advisory-package-curation:
+
+Advisory Package Curation
+=========================
+
+Follow these steps to curate the packages associated with an advisory:
+
+.. image:: images/advisory-package-curation.png
+
+1. Click the alias you want to curate (for example, **CVE-2024-6221**).
+
+2. Select the appropriate package version status.
+
+   - For each package version, click **Select value** and choose one of the following statuses:
+
+     - **AFFECTED**
+     - **FIXED**
+     - **UNAFFECTED**
+
+   .. image:: images/package_select_value.png
+
+   .. note::
+
+      Click **Select value** multiple times to cycle through the available statuses (**AFFECTED**, **FIXED**, and **UNAFFECTED**).
+
+      Alternatively, if one of the suggested advisories is correct, click **Pick this** to automatically apply the recommended package version information.
+
+   .. image:: images/package_pick_this.png
+
+3. Click **Next item**. If the button is available, repeat steps 2–3 for each remaining package.
+
+   .. image:: images/package_next_item.png
+
+4. After reviewing all packages, click **Submit** to save and complete the package curation.
+
+   .. image:: images/package_submit.png

docs/source/advisory-severity-curation.rst

@@ -0,0 +1,24 @@
+.. _advisory-severity-curation:
+
+Advisory Severity Curation
+==========================
+
+Follow these steps to curate the severity for advisories:
+
+.. image:: images/advisory-severity-curation.png
+
+1. Click the alias you want to curate (for example, ``GHSA-5rfv-66g4-jr8h``)
+
+2. For each key, select the appropriate vector value from the available options
+
+   .. image:: images/severity_select_value.png
+
+   Alternatively, select the correct advisory severity
+
+   .. image:: images/severity_pick_this.png
+
+3. Click **Next item**, if the button is available, and repeat steps 2–3 for each remaining severity
+
+4. Once you have curated all advisories, click **Submit**
+
+   .. image:: images/severity_submit-button.png

docs/source/advisory-todos.rst

@@ -0,0 +1,46 @@
+.. _advisory_todos:
+
+Advisory Todos
+==============
+
+Overview
+----------
+The Advisory To-Dos queue contains security advisories that require manual review to improve the quality and
+accuracy of vulnerablecode data
+
+Supported Advisory Curation Types
+------------------------------------
+
+Our advisory curation process supports enriching and validating the following vulnerability advisory metadata, depending on the information available from trusted sources:
+
+* **Package Curation**: See :ref:`advisory-package-curation`.
+
+  - Advisories with conflicting **fixed** package versions.
+  - Advisories with conflicting **affected** package versions.
+  - Advisories with conflicting **affected** and **fixed** package versions.
+  - *(Not currently supported)* Advisories missing affected package versions.
+  - *(Not currently supported)* Advisories missing fixed package versions.
+  - *(Not currently supported)* Advisories missing both affected and fixed package versions.
+
+* **Severity Curation**: Advisories with conflicting CVSS vectors (CVSSv3, CVSSv3.1, CVSSv4, ...) . See :ref:`advisory-severity-curation`.
+* **Weakness Curation**: Advisories with conflicting Common Weakness Enumeration (CWE) identifiers. See :ref:`advisory-weakness-curation`.
+* **Summary Curation**: *(Not currently supported).*
+
+Each curation guide provides detailed instructions for reviewing advisories in the corresponding curation queue.
+
+Accessing the Advisory To-Dos Queue
+-----------------------------------
+
+1. Go to https://public.vulnerablecode.io/.
+
+2. Click **Advisory To-Dos**.
+
+   .. image:: images/advisory-to-dos-click.png
+
+3. Click **Continue**.
+
+   .. image:: images/continue-button.png
+
+4. Search for advisories by **alias**, or filter the list by **Resolved** status or **issue type**.
+
+   .. image:: images/advisory-to-do-dashbaord.png

docs/source/advisory-weakness-curation.rst

@@ -0,0 +1,22 @@
+.. _advisory-weakness-curation:
+
+Advisory Weakness Curation
+===========================
+
+Follow these steps to curate the `Common Weakness Enumeration (CWE) <https://cwe.mitre.org/>`_ associated with an advisories:
+
+.. image:: images/advisory-weakness-curation.png
+
+1. Click the Alias you want to curate, for example, ``CVE-2022-24512``.
+
+2. Select the appropriate CWE status (APPLICABLE or NOT APPLICABLE) for the selected CWE ID.
+
+   .. image:: images/weakness_select_value.png
+
+   OR, you can select the CWE status from an advisory that you trust to provide accurate data.
+
+   .. image:: images/weakness_pick_this.png
+
+3. Click **Submit**.
+
+   .. image:: images/weakness_submit.png